From owner-freebsd-security@FreeBSD.ORG  Sun Jun 27 01:20:33 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9C96916A4CE
	for <freebsd-security@freebsd.org>;
	Sun, 27 Jun 2004 01:20:33 +0000 (GMT)
Received: from Neo-Vortex.Ath.Cx (203-217-83-128.dyn.iinet.net.au
	[203.217.83.128])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1006943D45
	for <freebsd-security@freebsd.org>;
	Sun, 27 Jun 2004 01:20:32 +0000 (GMT)
	(envelope-from root@Neo-Vortex.Ath.Cx)
Received: from localhost.Neo-Vortex.got-root.cc
	(Neo-Vortex@localhost.Neo-Vortex.got-root.cc [127.0.0.1])
	by Neo-Vortex.Ath.Cx (8.12.10/8.12.10) with ESMTP id i5R1JpOq059991;
	Sun, 27 Jun 2004 11:19:54 +1000 (EST)
	(envelope-from root@Neo-Vortex.Ath.Cx)
Date: Sun, 27 Jun 2004 11:19:51 +1000 (EST)
From: Neo-Vortex <root@Neo-Vortex.Ath.Cx>
To: Dave <mudman@metafocus.net>
In-Reply-To: <20040626131219.T1249@metafocus.net>
Message-ID: <20040627111832.D59990@Neo-Vortex.Ath.Cx>
References: <20040626131219.T1249@metafocus.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-security@freebsd.org
Subject: Re: ttyv for local only?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 27 Jun 2004 01:20:33 -0000

Hmmm, ttyv* is for local console's only (normally anyway) and ttyp* is for
remote (ssh, screen, telnet, etc), are you sure some idiot didnt try to
logon as qmaild in the third console when you wernt looking?

On Sat, 26 Jun 2004, Dave wrote:

>
> I get this in my security postings.
>
> Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2
> Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2, qmaild
>
> As it turns out, I'm not running qmail :)  And if I did, it would
> definitely have a nologin shell.  But that's beside the point-
>
> I have had a perception that ttyv was for local/console logins, and that
> just "tty" was for remote logins.
>
> Is my understanding wrong here?
>
>
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
>